Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/189a7a4b-2e62-3420-8747-80aab84fcb06.roa
File:                     189a7a4b-2e62-3420-8747-80aab84fcb06.roa (raw, json)
Hash identifier:          xDx7UFPfNsz0J6ZwHFPCztrzTgm6Dh0IqU5yW5oQ4fc=
Subject key identifier:   7F:48:E0:93:53:BF:CA:D0:EC:2D:41:8E:C0:B3:16:D8:CD:50:A5:CC
Certificate issuer:       /CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1
Certificate serial:       010D0C9F432858474F4B7248A0961B65B36F2C80
Authority key identifier: 34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/189a7a4b-2e62-3420-8747-80aab84fcb06.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     18986
IP address blocks:        66.51.160.0/24 maxlen: 24
                          66.51.161.0/24 maxlen: 24
                          66.51.162.0/24 maxlen: 24
                          66.51.163.0/24 maxlen: 24
                          66.51.164.0/24 maxlen: 24
                          66.51.165.0/24 maxlen: 24
                          66.51.166.0/24 maxlen: 24
                          66.51.167.0/24 maxlen: 24
                          66.51.168.0/24 maxlen: 24
                          66.51.169.0/24 maxlen: 24
                          66.51.170.0/24 maxlen: 24
                          66.51.171.0/24 maxlen: 24
                          66.51.172.0/24 maxlen: 24
                          66.51.173.0/24 maxlen: 24
                          66.51.174.0/24 maxlen: 24
                          66.51.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:72:48:a0:96:1b:65:b3:6f:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35a3f088-05b7-470a-9af5-45bd25ee8fc1
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=59391311-e784-4fd9-846c-2cf516a9139c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:73:e8:b4:53:f0:05:a2:3b:ab:84:83:60:01:
                    da:c1:9e:e1:68:ad:d7:4c:7e:b6:93:9c:c5:3d:69:
                    d9:84:1d:43:93:a8:76:3d:28:ee:43:8f:d9:97:59:
                    5a:cf:43:1e:21:d1:7c:95:53:da:d4:30:a5:0c:0e:
                    cf:cf:6a:1b:fd:e2:fc:3e:66:50:37:ac:1e:e8:8f:
                    02:aa:88:29:ff:7d:1a:6f:c6:f3:be:fd:15:b7:14:
                    06:4a:d7:de:1c:bb:f0:41:f6:f7:91:88:1f:60:87:
                    a0:02:ab:49:32:87:60:dd:2f:1f:69:3d:63:a3:cd:
                    88:55:e5:ac:9f:a9:7d:8c:1b:ee:a4:6d:cb:95:21:
                    5f:54:dd:58:4e:ca:cd:ba:38:c9:a4:cf:0d:51:e6:
                    f6:61:26:45:4f:b3:01:25:3d:f3:dc:4e:c7:ad:ec:
                    0c:26:7b:97:cd:09:e5:af:21:fd:cf:24:f2:5c:7e:
                    86:8e:0a:07:5b:61:07:0c:3a:a5:63:61:67:11:f9:
                    25:e9:1e:49:ab:ac:36:f2:67:d9:77:e8:83:fe:56:
                    62:81:42:89:53:4f:b0:06:ad:4b:96:ae:0f:3e:79:
                    71:3c:95:ae:50:6b:d0:1a:d4:66:71:db:e7:42:ee:
                    01:6b:66:f9:1f:48:ca:e5:d0:ee:4a:42:3b:2f:b7:
                    40:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:48:E0:93:53:BF:CA:D0:EC:2D:41:8E:C0:B3:16:D8:CD:50:A5:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/189a7a4b-2e62-3420-8747-80aab84fcb06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1/35a3f088-05b7-470a-9af5-45bd25ee8fc1.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:D6:22:F5:BE:AB:1C:32:9E:55:11:CD:76:03:75:50:9C:17:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35a3f088-05b7-470a-9af5-45bd25ee8fc1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:54:d7:5f:ec:9f:64:4d:4f:b3:8b:cd:0e:2d:67:21:78:40:
         c4:48:dd:29:58:92:4e:de:e4:7c:82:d2:c0:c4:27:53:6a:f5:
         c4:fe:bd:13:a5:93:a2:5d:33:a3:12:e0:f2:aa:d3:66:fa:85:
         57:87:04:7a:28:e1:b9:8c:84:e6:72:77:85:6f:02:c7:38:23:
         5c:6c:d7:79:0a:00:28:7d:62:90:99:f1:48:72:62:9d:75:0c:
         29:ab:22:af:c6:bc:a5:ea:9e:85:de:3f:fa:a6:45:07:00:c9:
         fc:5c:83:ae:e3:76:dd:97:42:55:80:25:1d:21:43:c2:9a:de:
         ff:e4:e5:54:a8:64:4c:91:ee:8b:2a:0e:59:f4:be:15:db:a5:
         82:28:ad:4b:e1:b9:63:6f:bc:b3:d9:62:7e:1c:fd:88:9c:84:
         a5:c1:7b:48:94:f3:ac:ee:ef:2e:22:f2:a1:9a:16:0b:20:7a:
         f7:fd:f7:86:3e:6f:39:40:91:ad:6b:a9:d9:28:ca:61:1e:97:
         25:ec:c6:08:6b:39:62:ac:e9:d6:db:46:c2:dd:fd:20:f1:e2:
         bc:fb:3c:13:d9:b4:4d:a3:49:6f:a8:34:5b:f0:f6:1e:01:d3:
         4c:e1:46:3d:67:a0:23:47:14:22:d3:ba:e0:29:43:6d:53:65:
         5a:f8:6a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:11:47 2024 by rpki-client on console-fra.rpki-client.org